kelektiv/node.bcrypt.js
Node.bcrypt.js
这是一个用于 Node.js 的 bcrypt 密码哈希库和加密模块。它提供了一套工具，用于生成安全盐值、计算加密强度高的哈希值以及验证密码，以保护用户凭据免受未经授权的访问。
该库实现了自适应哈希，利用可配置的成本因子来增加暴力破解密码所需的计算工作量。它包括一个密码验证工具，可保护比较过程免受时序攻击。
该项目涵盖安全密码哈希和盐值生成，以及用于哈希成本提取和密码验证的实用程序。这些功能支持安全密码存储和用户身份验证工作流。
Features
- Password Hashing Utilities - Provides a complete bcrypt implementation for transforming passwords into secure, irreversible hashes for storage.
- Adaptive - Implements an adaptive hashing algorithm with a configurable cost factor to scale security with hardware.
- Node.js Native Addons - Binds a C++ implementation of the bcrypt algorithm to Node.js using native addons.
- Adaptive Hashing Costs - Implements adjustable computational costs for hashes to increase resistance against brute-force attacks.
- Brute Force Protections - Employs salt and adaptive cost factors to significantly slow down password cracking attempts.
- Cryptographic Salt Generation - Generates high-entropy random salts to ensure unique hashes for identical passwords.
- Node.js Cryptography Integrations - Integrates C++ cryptographic primitives into the Node.js environment for strong password hashing.
- Password Verification - Provides utilities to securely compare plaintext passwords against stored hashes while resisting timing attacks.
- Bcrypt Implementations - Implements the bcrypt algorithm for secure password hashing and verification in Node.js.
- Thread Pool Offloading - Offloads CPU-intensive hashing operations to separate threads to prevent blocking the main event loop.
- Timing Attack Prevention - Prevents information leakage from timing attacks by using constant-time comparison algorithms for password hashes.
- User Authentication Workflows - Supports secure user login flows by verifying plaintext passwords against stored bcrypt hashes.
- Cryptography and Security - Bcrypt implementation for Node.js.
